Privacy Policy

1. Who handles your information

ForgeUI is operated from New Zealand by Scott Forster, a New Zealand sole trader trading as ForgeUI. This is an operational privacy policy, not a claim that all information remains in New Zealand.

2. Information we process

• Account email, identity, verification and account-status information.
• Authentication and security records, including credential hashes, sessions, device/browser information, request/IP metadata, password recovery, email verification and multi-factor security records.
• Hosted projects, revisions, project assets, Interactive assets, filenames, storage metadata and quota information.
• AI prompts and project context sent for generation; generated output; provider, model, request, usage, cost and failure telemetry.
• AI Credit balances, grants, reservations, consumption, reversals and activity.
• Purchase, payment, currency, fulfilment, Stripe identifier, refund and reconciliation records. ForgeUI does not receive full card details entered into Stripe Checkout.
• Security/audit events, support correspondence and public-site analytics or interaction events.

3. Why we use it

We use information to create and secure accounts; deliver, persist and export projects; provide AI features; operate credits and payments; fulfil purchases; prevent abuse and fraud; diagnose failures; provide support; maintain financial and audit records; understand public-site use; comply with law; and protect users and the service.

4. Service providers and overseas processing

ForgeUI may disclose or make information available to providers that perform payment processing, AI generation, hosting/infrastructure, transactional email, analytics, security and operational support. These providers may process information outside New Zealand under their own infrastructure and contractual arrangements.

AI prompts and relevant context are sent to the applicable AI provider to produce requested output. Payment details are entered into Stripe's hosted payment service; ForgeUI receives transaction identifiers and payment status needed for fulfilment and records.

5. Retention and security

ForgeUI uses technical and organizational safeguards appropriate to the service. No internet service can guarantee absolute security. Information is retained for as long as reasonably needed for the purposes above, including account operation, project recovery, financial records, disputes, fraud prevention, security and legal obligations. Different categories may have different retention periods.

Account closure does not necessarily erase financial, transaction, fraud-prevention, security or audit records that reasonably need to be retained or are legally required.

6. Analytics

The public ForgeUI website uses Vercel Analytics and records selected interactions such as showcase, image and download activity. This information helps understand site performance and which public material is useful. Browser or network controls may limit some analytics processing.

7. Access, correction and questions

You may ask for access to or correction of personal information held by ForgeUI, subject to applicable exceptions. Contact forgeui.esp32@gmail.com. Include enough information to identify your account and request, but do not send passwords, recovery codes or full card details.

If you believe a privacy concern has not been resolved, you may have the right to contact the New Zealand Office of the Privacy Commissioner or the relevant authority in your jurisdiction.

8. Changes

Material changes will be published with a new version or effective date. Where appropriate, ForgeUI may require account holders to acknowledge updated terms before continued use of affected services.